The Hamburg Data Protection Officer, Johannes Caspar, has sent a letter to Facebook as part of a formal investigation into its privacy policies. He claims that the collection, retention and use of private data of non registered members by Facebook is illegal and against privacy regulations. Although Facebook changed their policy in April, allowing users to block access to email contacts, Caspar argues that previously saved details continue to be retained and used without permission. Facebook has until 11 August to respond. This article highlights the importance of every user's privacy and reminds FE and HE institutions to ensure they have permission to collect and make further use of each individual's personal information. Further details are available at: http://news.cnet.com/8301-13577_3-20009886-36.html.